On Wed, 8 Mar 2017 00:34:44 +0100 Hanno Böck <hanno at hboeck.de> wrote: > That's already bad advice. Use an AEAD, always. From the mentioned > ones only CTR is an AEAD. argh, sorry. Of course this should read "Only GCM is an AEAD" -- Hanno Böck https://hboeck.de/ mail/jabber: hanno at hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42